Terminal Services Connections - Times and Security

[LeonieCol]

Hi all,

 

I wonder if anyone can tell me if you are able to set a time window on TS so that users can only connect between certain hours when working offsite.

 

For security reasons one of our Governors does not want people being able to connect after midnight and before 6am.

 

Is it also possible to lock an account after three wrong attempts to log in?

 

Many thanks for anyone who can help.

[FN-GM]

Hi all,

 

I wonder if anyone can tell me if you are able to set a time window on TS so that users can only connect between certain hours when working offsite.

 

For security reasons one of our Governors does not want people being able to connect after midnight and before 6am.

 

Is it also possible to lock an account after three wrong attempts to log in?

 

Many thanks for anyone who can help.

 

You could use the built in feature in AD to set logon times. You will find this in the account settings of a user. You can edit users on mass by selecting them all.

 

To be honest i dont see how setting logon times would increase security.

Edited March 23, 2011 by FN-GM

[sukh]

Hi

 

 

You can also set an account to lockout after 3 attempts. Below is some articles which will help you. You can also look at the Default Domain Policy.

 

Appendix A: Fine-Grained Password and Account Lockout Policy Review

 

Active Directory Domain Services (AD DS) Fine-Grained Password and Account Lockout Policy Step-by-Step Guide

 

Sukh

[FN-GM]

Hi

 

 

You can also set an account to lockout after 3 attempts. Below is some articles which will help you. You can also look at the Default Domain Policy.

 

Appendix A: Fine-Grained Password and Account Lockout Policy Review

 

Active Directory Domain Services (AD DS) Fine-Grained Password and Account Lockout Policy Step-by-Step Guide

 

Sukh

 

He is not asking about account lockouts, he is asking about restricting logon times...

[jcollings]

He is not asking about account lockouts, he is asking about restricting logon times...

 

He actually asked about both things.

[FN-GM]

He actually asked about both things.

 

oh my apologies

 

I missed that bit both times.

 

Sorry

[LeonieCol]

Hi both. Thanks very much. I have never used the logon hours under user properties so will start doing that. I get your point about security, FN-GM, but if it makes the governors feel better then it's worthwhile doing it!

 

Thanks SUKH for the lockout articles.

 

By the way I am not a 'he'. I am a 'she'!

[FN-GM]

Hi both. Thanks very much. I have never used the logon hours under user properties so will start doing that. I get your point about security, FN-GM, but if it makes the governors feel better then it's worthwhile doing it!

 

Thanks SUKH for the lockout articles.

 

By the way I am not a 'he'. I am a 'she'!

 

There is a group policy to enable if you want to force users to log off when the logon hours expire. If not by defualt if they are aleady logged on they can carry on after the logon hours.